コード化でトイル撲滅へ / coding-to-eliminate-toil

2021/10/01 LT資料

Transcript

1. ίʔυԽͰτΠϧ๾໓΁ 2021/10/01 Technology&Design Department
2. Speaker SRE Team(Engineering Section)ɹ ओʹAWS৮Γͳ͕ΒΠϯϑϥߏங΍πʔϧ࡞੒ ࠷ۙࢠڙ͕า͖ճΓग़ͨ͠ӨڹͰࣗ෼ͷӡಈෆ ଍͕গͣͭ͠ղফ͍ͯ͠ΔΑ͏ͳؾ͕ɻɻɻ
3. Έͳ͞Μ͸τΠϧ(खಈɾ܁Γฦ͠࡞ۀ) ʹ ೰·͞Ε͍ͯ·ͤΜ͔ʁ
4. ாථग़ྗ ϝʔϧૹ৴ ظݶ؅ཧ ूܭ࡞ۀ υΩϡϝϯ τ࡞੒ ෼ੳ άϥϑԽ FUDʜ
5. ࠓճ͸Πϯϑϥߏஙͱ σϓϩΠϑϩʔΛίʔυԽͯ͠ τΠϧΛ๾໓͓ͨ͠࿩
6. ֓ཁ
7. τΠϧͱ͸ ὎ࠓճ͸LP؀ڥߏங࣌ʹίʔυԽ “ʮτΠϧͱ͸ɺख࡞ۀɺ܁Γฦ͞ΕΔɺࣗಈԽ͕Մೳɺ ઓज़తɺ௕ظతͳՁ஋͕ͳ͍ɺαʔϏεͷ੒௕ʹൺྫͯ͠ ૿Ճ͢Δɺͱ͍ͬͨಛ௃Λ࣋ͭ࡞ۀͰ͢ɻʯ” –ʰSite Reliability Engineeringʱͷୈ 5 ষΑΓ
8. ࠓճͷLPͷ֓ཁʹ͍ͭͯ LPʹϝʔϧϑΥʔϜػೳΛ૊ΈࠐΜͩߏ੒ 1. LP͔Β͓໰͍߹ΘͤϑΥʔϜೖྗޙૹ৴ 2. DBʹॻ͖ࠐΉ 3. ؅ཧऀଆɺϢʔβʔଆʹϝʔϧૹ৴ 4. όοΫΞοϓͱͯ͠εϓϨουγʔτʹॻ͖ग़͢ ϝʔϧϑΥʔϜػೳʹؔͯ͠͸ผLPߏங࣌ʹ࡞੒ͨ͠ ΋ͷΛྲྀ༻ όοΫΤϯυ͸AWS SAMͰ؅ཧ
9. ࠓճͷτΠϧ 1.ϑϩϯτଆͷΠϯϑϥߏங
 ɹ὎TerraformʹΑΓίʔυԽͯ͠ߏங 2.ίϯςϯπߋ৽
 ɹ὎GitHub ActionsʹΑΓίʔυԽͯ͠σϓϩΠ
10. ݱঢ়ͷγεςϜߏ੒
11. ࠓճͷγεςϜߏ੒
12. ࣮ࡍʹ΍ͬͯΈͨ
13. 1.ϑϩϯτଆͷΠϯϑϥߏங ʢTerraformฤʣ
14. Terraformͱ͸ IaCΛ࣮ݱ͢ΔπʔϧͷҰͭͰΠϯϑϥϦιʔε ͷߏ੒؅ཧ HCL(HashiCorp Configuration Language)ͱҰ෦ jsonͰهड़ StateϑΝΠϧʹݱঢ়ͷߏ੒Λอ࣋ͯ͠ίʔυͷ ࠩ෼Λݟͳ͕ΒϦιʔε࡞੒ɾߋ৽ɾ࡟আΛߦ͏
15. ߏ੒&࣮ߦ # tfϑΝΠϧͷ಺༰ΛϦϞʔτʹ൓ө
 $ Terraform apply . "## environments $## sample "## backend.tf # stateϑΝΠϧͷڞ༗ઃఆ "## cloudfront.tf "## config.tf # provider΍ΫϨσϯγϟϧͷઃఆ৘ใ "## iam.tf "## route53.tf "## s3.tf "## terraform.tfvars # ม਺ͷ஋ $## variables.tf # ม਺ͷએݴ
16. ϑϩϯτଆͷΠϯϑϥߏங खॱॻ࡞੒ 4όέοτ࡞੒ $MPVE'SPOUߏங 3PVUFʹΑΓϧʔςΟϯά UGϑΝΠϧ࡞੒ ࠓճ • ޻਺࡟ݮʢ4h὎1hʣ • ΦϖϛεΛ๷͙ • ଐਓԽΛ๷͙ • मਖ਼΍ผ؀ڥߏங΋༰қ ݱঢ় ࠓճ ϑϩʔ 5FSSBGPSN࣮ߦ
17. 2.ίϯςϯπߋ৽ ʢGitHub Actionsฤʣ
18. GitHub Actionsͱ͸ GithubͷϦϙδτϦͷதʹ૊ΈࠐΊΔCI/CD αʔϏε ΠϕϯτۦಈͰ௚઀ίʔυΛϏϧυɺςε τɺσϓϩΠՄೳ ϫʔΫϑϩʔͱ͍͏୯ҐͰߏ੒͞ΕYAMLϑΝ ΠϧͰ࡞੒
19. ߏ੒&࣮ߦʢҰ෦ൈਮʣ on: workflow_dispatch: # Ϙλϯ࣮ߦ jobs: deploy: runs-on: ubuntu-latest
 steps: # ࣮ߦ͢ΔॲཧΛهड़ - name: Checkout # νΣοΫΞ΢τ uses: actions/checkout@v2 # ΞΫγϣϯʢॲཧͷ͔ͨ·Γʣ࣮ߦ - name: S3 Sync for root # S3Ξοϓϩʔυ uses: jakejarvis/s3-sync-action@be0c4ab89158cac4278689ebedd8407dd5f35a83 env: AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }} AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }} - name: Invalidate CloudFront # CloudFrontΩϟογϡΫϦΞ ɹɹɹɹuses: chetan/invalidate-cloudfront- action@00d50031f6b55bac485c63d8789c6c346645d1a5
20. ίϯςϯπߋ৽ ιʔείʔυͷ࠷৽ΛQVMM "84ίϯιʔϧϩάΠϯ 4̏Ξοϓϩʔυ $MPVE'SPOU
    ΩϟογϡΫϦΞ (JU)VC
    "DUJPOT࣮ߦ ࠓճ • ޻਺࡟ݮʢ10min὎1minʣ • ΦϖϛεΛ๷͙ • ଐਓԽΛ๷͙ • ಉ༷ͳϑϩʔͷ৔߹ɺྲྀ༻ ͠΍͍͢ ݱঢ় ࠓճ ϑϩʔ :BNMϑΝΠϧ࡞੒
    ʢॳճͷΈʣ
21. ·ͱΊ
22. ·ͱΊ ίϯςϯπɾυϝΠϯɾAWSΞΧ΢ϯτ͑͋͞Ε͹ ྨࣅαʔϏεߏங࣌΋ૉૣ্ཱͪ͛͘Մೳͱͳͬͨ मਖ਼΍܁Γฦ͠࡞ۀʹ޻਺࡟ݮͷޮՌ͕ߴ·Δ Φϖϛε΍ଐਓԽΛ๷͙͜ͱܨ͛ΒΕΔ ࠷ॳͷίʔυԽʹ͸࣌ؒΛཁ͢Δ
23. ͋ͳͨ΋τΠϧΛ๾໓ͯ͠ ࣗ༝ͳ࣌ؒΛੜΈग़ͯ͠Έͯ͸ ͍͔͕Ͱ͠ΐ͏͔ʁ
24. Thanks